[Hunspell, Fuzz] Testcase

chrome/renderer/spellchecker/spellcheck_unittest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/renderer/spellchecker/spellcheck.h"
 
 #include <stddef.h>
 
 #include <memory>
 #include <utility>
 
 #include "base/files/file_path.h"
 #include "base/files/file_util.h"
 #include "base/macros.h"
 #include "base/message_loop/message_loop.h"
 #include "base/path_service.h"
 #include "base/run_loop.h"
 #include "base/strings/string_number_conversions.h"
 #include "base/strings/utf_string_conversions.h"
 #include "build/build_config.h"
 #include "chrome/common/spellcheck_common.h"
 #include "chrome/common/spellcheck_result.h"
 #include "chrome/renderer/spellchecker/hunspell_engine.h"
 #include "chrome/renderer/spellchecker/spellcheck_language.h"
 #include "testing/gtest/include/gtest/gtest.h"
 #include "third_party/WebKit/public/platform/WebVector.h"
 #include "third_party/WebKit/public/web/WebTextCheckingCompletion.h"
 #include "third_party/WebKit/public/web/WebTextCheckingResult.h"
+#include "third_party/hunspell/src/hunspell/hunspell.hxx"
 
 #define TYPOGRAPHICAL_APOSTROPHE L"\x2019"
 
 namespace {
 const int kNoOffset = 0;
 const int kNoTag = 0;
 
 base::FilePath GetHunspellDirectory() {
   base::FilePath hunspell_directory;
   if (!PathService::Get(base::DIR_SOURCE_ROOT, &hunspell_directory))
@@ skipping 38 matching lines @@
     // Instead, tests should exercise individual spelling engines.
     spell_check_->languages_.push_back(new SpellcheckLanguage());
     spell_check_->languages_.front()->platform_spelling_engine_.reset(
         new HunspellEngine);
     spell_check_->languages_.front()->Init(std::move(file), language);
 #else
     spell_check_->AddSpellcheckLanguage(std::move(file), language);
 #endif
   }
 
+  HunspellEngine* GetHunspellEngine() {
+    // We're guaranteed this is a HunspellEngine. FOR REALZ.
+    return static_cast<HunspellEngine*>(
+        spell_check_->languages_.front()->platform_spelling_engine_.get());
+  }
+
   ~SpellCheckTest() override {}
 
   SpellCheck* spell_check() { return spell_check_.get(); }
 
   bool CheckSpelling(const std::string& word, int tag) {
     return spell_check_->languages_.front()
         ->platform_spelling_engine_->CheckSpelling(base::ASCIIToUTF16(word),
                                                    tag);
   }
 
@@ skipping 1465 matching lines @@
   // to be updated accordingly.
   ASSERT_EQ(5, chrome::spellcheck_common::kMaxSuggestions);
   FillSuggestions(suggestions_list, &suggestion_results);
   ASSERT_EQ(5U, suggestion_results.size());
   EXPECT_EQ(base::ASCIIToUTF16("0foo"), suggestion_results[0]);
   EXPECT_EQ(base::ASCIIToUTF16("1foo"), suggestion_results[1]);
   EXPECT_EQ(base::ASCIIToUTF16("2foo"), suggestion_results[2]);
   EXPECT_EQ(base::ASCIIToUTF16("0bar"), suggestion_results[3]);
   EXPECT_EQ(base::ASCIIToUTF16("1bar"), suggestion_results[4]);
 }
+
+TEST_F(SpellCheckTest, Suggestions_Crasher) {
+  const char kTrigger[] =
+      "R:<?xl<<?x(ml?>Ω<abuts?xºml?>b<?xe?<}\r"
+      ":'€<abuts?xml?>b<?x-?->paralleldi!pe.Tselctionp";
+
+  int misspelling_start = 0;
+  int misspelling_length = 0;
+  std::vector<base::string16> suggestions;
+
+  bool result = spell_check()->SpellCheckWord(
+      base::UTF8ToUTF16(kTrigger).c_str(), kNoOffset,
+      static_cast<int>(strlen(kTrigger)), kNoTag, &misspelling_start,
+      &misspelling_length, &suggestions);
+
+  EXPECT_NE(0, misspelling_length);
+  EXPECT_FALSE(result);
+
+  // We're guaranteed this is a HunspellEngine. FOR REALZ.
+  HunspellEngine* engine = GetHunspellEngine();
+  ASSERT_NE(nullptr, engine);
+
+  Hunspell* hunspell = engine->get_hunspell();
+  ASSERT_NE(nullptr, hunspell);
+
+  char** suggest = nullptr;
+  int suggestion_length = hunspell->suggest(&suggest, kTrigger);
+  hunspell->free_list(&suggest, suggestion_length);
+
+  LOG(ERROR) << "Length:" << suggestion_length;
+}